Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 9 Nov 2000 23:55:08 -0800
From:      "Crist J . Clark" <cjclark@reflexnet.net>
To:        Jason Halbert <res02jw5@gte.net>
Cc:        questions@FreeBSD.ORG
Subject:   Re: Firewall Problem
Message-ID:  <20001109235508.W75251@149.211.6.64.reflexcom.com>
In-Reply-To: <3A0AEF4F.F801EE3@gte.net>; from res02jw5@gte.net on Thu, Nov 09, 2000 at 06:39:11PM %2B0000
References:  <3A0AEF4F.F801EE3@gte.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Nov 09, 2000 at 06:39:11PM +0000, Jason Halbert wrote:
> FreeBSD:
> 
> I'm having a slight problem with my firewall.  I need to be able to
> trace route, but I don't think my firewall is allowing the packets
> out.
> 
> Here is the result of trying to traceroute:
> 
> next# traceroute 4.33.96.1
> traceroute to 4.33.96.1 (4.33.96.1), 30 hops max, 40 byte packets
> traceroute: sendto: Permission denied
>  1 traceroute: wrote 4.33.96.1 40 chars, ret=-1

For the default UNIX traceroute to work, you will need to pass UDP
ports 33434-33474 going out of your network and allow ICMP types 3 and
11 in.
-- 
Crist J. Clark                           cjclark@alum.mit.edu


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001109235508.W75251>